epalshin/object-to-graphql
Clear documentation, repository tests, licensing, and static analysis provide a solid baseline. The workflows use unpinned action references and a container image, weakening build reproducibility.
43%
Total Score
50
100
93
75
Health Score Breakdown
This package has made only one release, with no releases in the last 12 months, and the latest release was in June 2021. That is strong evidence of abandonment for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long period without releases. No provided activity signal compensates for this gap.
All 7 analyzed action references are unpinned, and the audit found a high-confidence unpinned container image. The workflows have no untrusted checkout or script-injection path, but reproducibility remains weakened.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Eugene Palshin |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 webonyx/graphql-php Version ^14.6 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.